CVE-2020-3350

A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could occur when scanning malicious files. An attacker with local shell access could exploit this vulnerability by executing a script that could trigger the race condition. A successful exploit could allow the attacker to delete arbitrary files on the system that the attacker would not normally have privileges to delete, producing system instability or causing the endpoint software to stop working.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 18%
Affected Products (NVD)
VendorProductVersion
ciscoadvanced_malware_protection_for_endpoints
𝑥
< 1.12.4
ciscoadvanced_malware_protection_for_endpoints
𝑥
< 1.12.4
ciscoclam_antivirus
𝑥
< 0.102.4
debiandebian_linux
9.0
canonicalubuntu_linux
12.04
canonicalubuntu_linux
14.04
canonicalubuntu_linux
16.04
canonicalubuntu_linux
18.04
canonicalubuntu_linux
20.04
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
clamav
bookworm
1.0.5+dfsg-1~deb12u1
fixed
bullseye
0.103.10+dfsg-0+deb11u1
fixed
sid
1.4.1+dfsg-1
fixed
trixie
1.4.1+dfsg-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
clamav
bionic
Fixed 0.102.4+dfsg-0ubuntu0.18.04.1
released
focal
Fixed 0.102.4+dfsg-0ubuntu0.20.04.1
released
trusty
Fixed 0.102.4+dfsg-0ubuntu0.14.04.1+esm1
released
xenial
Fixed 0.102.4+dfsg-0ubuntu0.16.04.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
clamav
suse enterprise desktop 15 SP1
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP2
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP3
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP4
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP5
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP6
0.103.11-150600.16.7
fixed
suse enterprise desktop 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise sap 15 SP1
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP2
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP3
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP4
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP5
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP6
0.103.11-150600.16.7
fixed
suse enterprise sap 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise server 15 SP1
0.103.0-3.23.1
fixed
suse enterprise server 15 SP2
0.103.0-3.23.1
fixed
suse enterprise server 15 SP3
0.103.0-3.23.1
fixed
suse enterprise server 15 SP4
0.103.0-3.23.1
fixed
suse enterprise server 15 SP5
0.103.0-3.23.1
fixed
suse enterprise server 15 SP6
0.103.11-150600.16.7
fixed
suse enterprise server 15 SP7
1.4.2-150600.18.9.3
fixed
clamav-devel
suse enterprise desktop 15 SP1
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP2
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP3
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP4
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP5
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP6
0.103.11-150600.16.7
fixed
suse enterprise desktop 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise sap 15 SP1
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP2
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP3
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP4
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP5
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP6
0.103.11-150600.16.7
fixed
suse enterprise sap 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise server 15 SP1
0.103.0-3.23.1
fixed
suse enterprise server 15 SP2
0.103.0-3.23.1
fixed
suse enterprise server 15 SP3
0.103.0-3.23.1
fixed
suse enterprise server 15 SP4
0.103.0-3.23.1
fixed
suse enterprise server 15 SP5
0.103.0-3.23.1
fixed
suse enterprise server 15 SP6
0.103.11-150600.16.7
fixed
suse enterprise server 15 SP7
1.4.2-150600.18.9.3
fixed
clamav-docs-html
suse enterprise desktop 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise sap 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise server 15 SP7
1.4.2-150600.18.9.3
fixed
clamav-milter
suse enterprise desktop 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise sap 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise server 15 SP7
1.4.2-150600.18.9.3
fixed
libclamav12
suse enterprise desktop 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise sap 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise server 15 SP7
1.4.2-150600.18.9.3
fixed
libclamav9
suse enterprise desktop 15 SP1
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP2
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP3
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP4
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP5
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP6
0.103.11-150600.16.7
fixed
suse enterprise sap 15 SP1
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP2
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP3
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP4
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP5
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP6
0.103.11-150600.16.7
fixed
suse enterprise server 15 SP1
0.103.0-3.23.1
fixed
suse enterprise server 15 SP2
0.103.0-3.23.1
fixed
suse enterprise server 15 SP3
0.103.0-3.23.1
fixed
suse enterprise server 15 SP4
0.103.0-3.23.1
fixed
suse enterprise server 15 SP5
0.103.0-3.23.1
fixed
suse enterprise server 15 SP6
0.103.11-150600.16.7
fixed
libclammspack0
suse enterprise desktop 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise sap 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise server 15 SP7
1.4.2-150600.18.9.3
fixed
libfreshclam2
suse enterprise desktop 15 SP1
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP2
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP3
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP4
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP5
0.103.0-3.23.1
fixed
suse enterprise desktop 15 SP6
0.103.11-150600.16.7
fixed
suse enterprise sap 15 SP1
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP2
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP3
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP4
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP5
0.103.0-3.23.1
fixed
suse enterprise sap 15 SP6
0.103.11-150600.16.7
fixed
suse enterprise server 15 SP1
0.103.0-3.23.1
fixed
suse enterprise server 15 SP2
0.103.0-3.23.1
fixed
suse enterprise server 15 SP3
0.103.0-3.23.1
fixed
suse enterprise server 15 SP4
0.103.0-3.23.1
fixed
suse enterprise server 15 SP5
0.103.0-3.23.1
fixed
suse enterprise server 15 SP6
0.103.11-150600.16.7
fixed
libfreshclam3
suse enterprise desktop 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise sap 15 SP7
1.4.2-150600.18.9.3
fixed
suse enterprise server 15 SP7
1.4.2-150600.18.9.3
fixed